chart: bump version to 0.4.4 and add post-init SQL configuration for recovery mode

Author: darkliyznyanlin910

charts/cnpg-cluster/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.4.3
+version: 0.4.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/cnpg-cluster/templates/cnpg-cluster.yaml

@@ -110,6 +110,26 @@ spec:
       localeCType: C
       localeCollate: C
       owner: app
+      {{- $initSQL := .Values.recovery.postInitApplicationSQL | default list }}
+      {{- if .Values.vault.enabled }}
+      {{- $appRole := (index .Values.managedRoles 0).name | default "app" }}
+      {{- $vaultSQL := list
+          "create schema if not exists extensions"
+          "create extension supabase_vault cascade"
+          (printf "grant usage on schema vault to %s" $appRole)
+          (printf "grant execute on all functions in schema vault to %s" $appRole)
+          (printf "grant select on all tables in schema vault to %s" $appRole)
+          (printf "grant delete on all tables in schema vault to %s" $appRole)
+          (printf "grant references on all tables in schema vault to %s" $appRole)
+      }}
+      {{- $initSQL = concat $vaultSQL $initSQL }}
+      {{- end }}
+      {{- if $initSQL }}
+      postInitApplicationSQL:
+        {{- range $initSQL }}
+        - {{ . | quote }}
+        {{- end }}
+      {{- end }}
   {{- end }}
 
   {{- if or (eq .Values.recovery.mode "production") (eq .Values.recovery.mode "recovery") }}

charts/cnpg-cluster/values.yaml

@@ -77,6 +77,11 @@ recovery:
   # Mode 3: "recovery" - Recover from specific timeline
   #
   mode: "fresh" # Options: fresh, production, recovery
+  # SQL statements to run after initdb (fresh mode only)
+  postInitApplicationSQL: []
+  # Example:
+  # postInitApplicationSQL:
+  #   - create extension supabase_vault cascade;
   # https://cloudnative-pg.io/documentation/current/recovery/#recovery-targets
   target: {}
   # Timeline configuration